Privacy Policy
1. Who this policy covers
Lens It is free, open-source software. It has three parts:
- This website, including the "Try it" page.
- The Lens It app, which photographers run on their own laptop at events.
- The guest page, which the app shows on guests' phones over the venue's local Wi-Fi.
When a photographer uses Lens It at an event, the photographer is responsible for the data (the "data controller"). They decide which photos are loaded and how long face data is kept. WANDERCOIL, the maker of Lens It, provides the software only. We don't operate any server that receives event data.
2. What data is processed, and where
- Event photos: stay on the photographer's laptop. Lens It reads them but never modifies or uploads them.
- Face data (biometric data): Lens It turns each face into 128 numbers (a "face embedding") so it can compare faces. For events, these are stored only on the photographer's laptop. On the Try page, they exist only in your browser's memory.
- Your selfie: sent over the venue's local Wi-Fi to the photographer's laptop, matched in memory, then discarded. It is never saved to disk and never sent to the internet. On the Try page it never leaves your device.
- Your search results: kept in the app's memory for up to 30 minutes, so you can view and download your photos, then deleted.
3. Why, and on what basis
Face data is used only to show you the event photos you appear in. Because face data is sensitive personal data under the Nigeria Data Protection Act 2023 (and similar laws such as the GDPR), we rely on your explicit consent. Lens It asks for it before your selfie is taken, and refuses to search without it. You can say no and simply ask the photographer for your photos instead.
4. How long data is kept
- Selfies: not kept at all.
- Search results: up to 30 minutes, in memory only.
- Event face data: deleted automatically after the period the photographer chooses (24 hours, 3 days or 7 days), or at any time with "Delete face data now".
- Try page: everything is erased when you reload or close the tab.
5. Your rights
You can withdraw consent, ask what data is held about you, or ask for it to be deleted. For an event, contact the photographer, who controls the laptop and can delete all face data immediately. Because we never receive event data, we can't access or delete it on anyone's behalf.
6. Cookies and tracking
Lens It uses no cookies, no analytics and no advertising trackers on this website, the Try page, the app or the guest page. That's why there's no cookie banner. To display the website, your browser does fetch:
- fonts from Google Fonts, and
- the open-source AI library (ONNX Runtime Web) from the jsDelivr CDN, on the Try page only.
Those providers may see your IP address as part of a normal web request, under their own privacy policies. They never see your photos or selfie. The app and the guest page at events make no internet requests at all.
7. Feedback
If you choose to send feedback, you do it through our feedback form on GitHub. It is public, it is sent only when you submit it, and it is handled under GitHub's privacy statement. Please don't include photos, faces or other people's details. Lens It never sends feedback, usage data or photos automatically.
8. Security
The app checks the integrity of its AI models and software packages and refuses tampered files. Setup screens can't be opened from guests' phones. See SECURITY.md.
9. Children
Guests under 18 should use Lens It only with a parent's or guardian's permission. Photographers shouldn't knowingly process children's face data without that permission.
10. Changes and contact
If this policy changes, we'll update the date at the top. For questions, open an issue at github.com/Wandercoil/lensit/issues. For security problems, use the private "Report a vulnerability" button on the repository's Security tab.